this post was submitted on 10 Jul 2023
27 points (93.5% liked)

Selfhosted

39488 readers
263 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

Hi folks, I'm just getting into this hobby thanks to the posts in this community. So far, I've installed Ubuntu server 22.04 on an old laptop and got paperless working, and I'm pretty pumped. Now I would like to access it outside of my home network on my phone.

I have a Netgear R7000 with Advanced Tomato installed. Here's my plan, but I don't know if it would work... So I'm hoping for a peer review of sorts.

  • Get openVPN working on the router as a server.
  • make a certificate for my phone and use it as a client.
  • use my fedora laptop as the CA (?).

I think I need to use easy-RDA to make the keys and certificates...

Does that sound about right? It's this a good approach or is there something better/easier/more effective?

If there's a great tutorial around for accessing the home network externally, I'd super appreciate it. Would obviously prefer to do it myself and not pay for a service... I've been enjoying the learning experience!

you are viewing a single comment's thread
view the rest of the comments
[–] CeeBee@lemmy.world 18 points 1 year ago (22 children)

Tailscale

That's the only word you need. Ultimately, traditional VPN is outdated and almost obsolete. Wireguard is the "next iteration" of network tunneling tech. And Tailscale just makes it super simple.

[–] Dark_Arc@lemmy.world 1 points 1 year ago* (last edited 1 year ago) (7 children)

I'll pitch ZeroTier instead, it's the same concept, but it's more FOSS friendly, older, doesn't have the non-networking "feature bloat" of Tailscale, and can handle some really niche cases like Ethernet bridging (should you ever care).

Just:

  1. Go to their website, create an account, and create a network
  2. Add ZeroTier to the devices you need to connect
  3. Enter your network ID on those devices
  4. Approve the devices in the web control panel

If you want to go full self hosting, you can do that too but you will need something with a static IP to control everything (https://docs.zerotier.com/self-hosting/network-controllers/?utm_source=ztp) this would replace the web panel parts.

You can also do a LAN routing based solution pretty easily using something like a Raspberry Pi.

[–] RustedSwitch@lemmy.world 1 points 1 year ago (4 children)

How secure is zerotier in your opinion?

[–] DataDreadnought@lemmy.one 3 points 1 year ago

This is a very good read https://blog.reconinfosec.com/locking-down-zerotier

TLDR: Used at hacker conference Defcon 26 in a blue team (defense team) capture the flag.

load more comments (3 replies)
load more comments (5 replies)
load more comments (19 replies)